Stuck - Lost a partition

How to use TestDisk to recover lost partition
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
lcangler
Posts: 1
Joined: 29 Dec 2012, 04:30

Stuck - Lost a partition

#1 Post by lcangler »

I am trying to recover my D partition that has suddenly disappeared. My 320 GB drive was partitioned between a C and D drive. Windows 7 64bit is loaded on the C drive. Attached is the disk mgt screen shot which shows what is found now. I have no idea what the small 1.46gb partition is, but it is not my boot drive as I have only one operating system and it is on Drive c (programs).
Screen shot of disk mgt
Screen shot of disk mgt
Untitled.jpg (125.16 KiB) Viewed 1754 times
The problem is that when I use testdisk my drive D (storage) is there along with all the files. But it will only allow my to delete it and I don't want to do that, so I don't understand what to do. It is also showing the small disk as my boot disk when it is not. I really could use some help. All I want to do is restore the large 219GB disk back to the D drive.

Fri Dec 28 22:03:14 2012
Command line: TestDisk

TestDisk 6.14-WIP, Data Recovery Utility, December 2012
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 7 (7601) SP1
Compiler: GCC 4.7, MinGW 3.11
Compilation date: Dec 23 2012 19:10:25
ext2fs lib: none, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20120504
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=320072933376
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=73399514624
Hard disk list
Disk \\.\PhysicalDrive0 - 320 GB / 298 GiB - CHS 38913 255 63, sector size=512
Drive C: - 73 GB / 68 GiB - CHS 8923 255 63, sector size=512

Partition table type (auto): Intel
Disk \\.\PhysicalDrive0 - 320 GB / 298 GiB
Partition table type: Intel

Analyse Disk \\.\PhysicalDrive0 - 320 GB / 298 GiB - CHS 38913 255 63
Geometry from i386 MBR: head=255 sector=63
check_part_i386 1 type 27: no test
NTFS at 191/89/27
Info: size boot_sector 143358425, partition 143358427
NTFS at 37752/107/52
Current partition structure:
1 * Windows RE(store) 0 32 33 191 89 26 3072000
2 P HPFS - NTFS 191 89 27 9114 254 63 143358427 [Programs]
3 E extended LBA 9114 223 32 37751 254 63 460055390
4 P hid. HPFS/NTFS 37752 107 52 38913 70 5 18649088 [HDDRECOVERY]
Space conflict between the following two partitions
2 P HPFS - NTFS 191 89 27 9114 254 63 143358427 [Programs]
3 E extended LBA 9114 223 32 37751 254 63 460055390

test_logical:
Partition sector doesn't have the endmark 0xAA55

search_part()
Disk \\.\PhysicalDrive0 - 320 GB / 298 GiB - CHS 38913 255 63
NTFS at 0/32/33
filesystem size 3072000
sectors_per_cluster 8
mft_lcn 128000
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 32 33 191 89 26 3072000 [System]
NTFS, blocksize=4096, 1572 MB / 1500 MiB
NTFS at 191/89/27
filesystem size 143358425
sectors_per_cluster 8
mft_lcn 810240
mftmirr_lcn 939
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 191 89 27 9114 254 61 143358425 [Programs]
NTFS, blocksize=4096, 73 GB / 68 GiB
NTFS at 9115/1/1
filesystem size 460053337
sectors_per_cluster 8
mft_lcn 1800
mftmirr_lcn 41
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 9115 1 1 37751 254 58 460053337 [Storage]
NTFS, blocksize=4096, 235 GB / 219 GiB
NTFS at 37752/107/52
filesystem size 18649088
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 37752 107 52 38913 70 5 18649088 [HDDRECOVERY]
NTFS, blocksize=4096, 9548 MB / 9106 MiB
get_geometry_from_list_part_aux head=255 nbr=2
get_geometry_from_list_part_aux head=255 nbr=2

Results
* HPFS - NTFS 0 32 33 191 89 26 3072000 [System]
NTFS, blocksize=4096, 1572 MB / 1500 MiB
HPFS - NTFS 191 89 27 9115 24 61 143360000 [Programs]
NTFS, blocksize=4096, 73 GB / 68 GiB
HPFS - NTFS 9115 1 1 37751 254 63 460053342 [Storage]
NTFS, blocksize=4096, 235 GB / 219 GiB
P HPFS - NTFS 37752 107 52 38913 70 5 18649088 [HDDRECOVERY]
NTFS, blocksize=4096, 9548 MB / 9106 MiB


dir_partition inode=5
* HPFS - NTFS 0 32 33 191 89 26 3072000 [System]
NTFS, blocksize=4096, 1572 MB / 1500 MiB
Directory /
5 dr-xr-xr-x 0 0 0 20-Mar-2011 17:22 .
5 dr-xr-xr-x 0 0 0 20-Mar-2011 17:22 ..
36 dr-xr-xr-x 0 0 0 20-Mar-2011 17:22 Boot
94 -r--r--r-- 0 0 383786 20-Nov-2010 06:40 bootmgr
108 dr-xr-xr-x 0 0 0 19-Apr-2010 14:42 Recovery
35 dr-xr-xr-x 0 0 0 19-Mar-2010 04:15 System Volume Information
49 -r--r--r-- 0 0 188 2-Dec-2009 14:26 WinREPartition.ini


dir_partition inode=5
HPFS - NTFS 191 89 27 9115 24 61 143360000 [Programs]
NTFS, blocksize=4096, 73 GB / 68 GiB
Directory /
5 dr-xr-xr-x 0 0 0 24-Dec-2012 21:22 .
5 dr-xr-xr-x 0 0 0 24-Dec-2012 21:22 ..
77 dr-xr-xr-x 0 0 0 16-Dec-2012 09:23 Program Files
130985 dr-xr-xr-x 0 0 0 26-Oct-2012 20:43 $AVG
51 dr-xr-xr-x 0 0 0 19-Apr-2010 14:44 $Recycle.Bin
52 dr-xr-xr-x 0 0 0 11-Nov-2009 19:30 Boot
14391 -r--r--r-- 0 0 383562 13-Jul-2009 20:38 bootmgr
14392 -r--r--r-- 0 0 8192 11-Nov-2009 19:30 BOOTSECT.BAK
14525 dr-xr-xr-x 0 0 0 14-Jul-2009 00:08 Documents and Settings
39 -r--r--r-- 0 0 3018608640 28-Dec-2012 18:42 hiberfil.sys
15494 -r--r--r-- 0 0 23897060 31-Aug-2010 19:29 mineroutput.txt
15494 -r--r--r-- 0 0 0 31-Aug-2010 19:29 mineroutput.txt
15494 -r--r--r-- 0 0 0 31-Aug-2010 19:29 mineroutput.txt
15494 -r--r--r-- 0 0 0 31-Aug-2010 19:29 mineroutput.txt
15494 -r--r--r-- 0 0 0 31-Aug-2010 19:29 mineroutput.txt
15494 -r--r--r-- 0 0 0 31-Aug-2010 19:29 mineroutput.txt
15494 -r--r--r-- 0 0 0 31-Aug-2010 19:29 mineroutput.txt
15494 -r--r--r-- 0 0 0 31-Aug-2010 19:29 mineroutput.txt
15494 -r--r--r-- 0 0 0 31-Aug-2010 19:29 mineroutput.txt
15494 -r--r--r-- 0 0 0 31-Aug-2010 19:29 mineroutput.txt
15494 -r--r--r-- 0 0 0 31-Aug-2010 19:29 mineroutput.txt
15494 -r--r--r-- 0 0 0 31-Aug-2010 19:29 mineroutput.txt
15494 -r--r--r-- 0 0 0 31-Aug-2010 19:29 mineroutput.txt
15494 -r--r--r-- 0 0 0 31-Aug-2010 19:29 mineroutput.txt
15494 -r--r--r-- 0 0 0 31-Aug-2010 19:29 mineroutput.txt
15494 -r--r--r-- 0 0 0 31-Aug-2010 19:29 mineroutput.txt
15494 -r--r--r-- 0 0 0 31-Aug-2010 19:29 mineroutput.txt
15494 -r--r--r-- 0 0 0 31-Aug-2010 19:29 mineroutput.txt
15494 -r--r--r-- 0 0 0 31-Aug-2010 19:29 mineroutput.txt
15494 -r--r--r-- 0 0 0 31-Aug-2010 19:29 mineroutput.txt
15494 -r--r--r-- 0 0 0 31-Aug-2010 19:29 mineroutput.txt
15494 -r--r--r-- 0 0 0 31-Aug-2010 19:29 mineroutput.txt
15494 -r--r--r-- 0 0 0 31-Aug-2010 19:29 mineroutput.txt
15494 -r--r--r-- 0 0 0 31-Aug-2010 19:29 mineroutput.txt
15494 -r--r--r-- 0 0 0 31-Aug-2010 19:29 mineroutput.txt
15494 -r--r--r-- 0 0 0 31-Aug-2010 19:29 mineroutput.txt
15494 -r--r--r-- 0 0 0 31-Aug-2010 19:29 mineroutput.txt
15494 -r--r--r-- 0 0 0 31-Aug-2010 19:29 mineroutput.txt
15494 -r--r--r-- 0 0 0 31-Aug-2010 19:29 mineroutput.txt
15494 -r--r--r-- 0 0 0 31-Aug-2010 19:29 mineroutput.txt
15494 -r--r--r-- 0 0 0 31-Aug-2010 19:29 mineroutput.txt
72320 -r--r--r-- 0 0 904704 2-Dec-2006 00:37 msdia80.dll
105272 dr-xr-xr-x 0 0 0 26-Mar-2011 11:03 output
135150 dr-xr-xr-x 0 0 0 24-Sep-2012 20:14 Output Files
2125 -r--r--r-- 0 0 4024811520 28-Dec-2012 18:42 pagefile.sys
61892 dr-xr-xr-x 0 0 0 20-Apr-2010 09:09 PMAIL
685 dr-xr-xr-x 0 0 0 16-Dec-2012 09:25 Program Files (x86)
995 dr-xr-xr-x 0 0 0 16-Dec-2012 09:26 ProgramData
36 dr-xr-xr-x 0 0 0 24-Apr-2010 13:06 System Volume Information
15537 dr-xr-xr-x 0 0 0 8-Sep-2010 18:59 temp.realtek
1113 dr-xr-xr-x 0 0 0 19-Apr-2010 14:43 Users
1298 dr-xr-xr-x 0 0 0 15-Dec-2012 20:40 Windows


dir_partition inode=5
HPFS - NTFS 9115 1 1 37751 254 63 460053342 [Storage]
NTFS, blocksize=4096, 235 GB / 219 GiB
Directory /
5 dr-xr-xr-x 0 0 0 16-Dec-2012 09:17 .
5 dr-xr-xr-x 0 0 0 16-Dec-2012 09:17 ..
36 dr-xr-xr-x 0 0 0 19-Apr-2010 16:35 $RECYCLE.BIN
41 dr-xr-xr-x 0 0 0 16-Dec-2012 08:18 Downloads
6218 dr-xr-xr-x 0 0 0 16-Sep-2010 15:09 ef38107cb2270d42e2c43daab742dbc2
5193 dr-xr-xr-x 0 0 0 24-Apr-2010 20:28 Mozilla
9467 dr-xr-xr-x 0 0 0 15-Dec-2012 21:15 msdownld.tmp
154 dr-xr-xr-x 0 0 0 19-Jun-2011 09:24 Music
2725 dr-xr-xr-x 0 0 0 28-Oct-2012 21:25 My eBooks
5101 dr-xr-xr-x 0 0 0 24-Apr-2010 20:25 My RoboForm Data
5962 dr-xr-xr-x 0 0 0 5-Apr-2011 06:32 New folder
7589 dr-xr-xr-x 0 0 0 5-Jan-2012 14:11 New folder (2)
9368 dr-xr-xr-x 0 0 0 18-Nov-2012 21:51 New folder (3)
5522 dr-xr-xr-x 0 0 0 24-Apr-2010 20:29 Outlook
9249 dr-xr-xr-x 0 0 0 29-Aug-2012 19:50 Output Files
9139 -r--r--r-- 0 0 4024811520 13-Dec-2012 08:19 pagefile.sys
156 dr-xr-xr-x 0 0 0 20-May-2012 20:22 Pictures
1222 dr-xr-xr-x 0 0 0 30-May-2010 20:37 Pictures sized
39 dr-xr-xr-x 0 0 0 19-Apr-2010 16:36 System Volume Information
155 dr-xr-xr-x 0 0 0 21-Sep-2011 19:06 Video


dir_partition inode=5
P HPFS - NTFS 37752 107 52 38913 70 5 18649088 [HDDRECOVERY]
NTFS, blocksize=4096, 9548 MB / 9106 MiB
Directory /
5 dr-xr-xr-x 0 0 0 19-Mar-2010 05:34 .
5 dr-xr-xr-x 0 0 0 19-Mar-2010 05:34 ..
35 -r--r--r-- 0 0 0 29-Jun-2009 21:29 !V6_00_03.VRP
36 dr-xr-xr-x 0 0 0 2-Dec-2009 13:34 BIN
177 dr-xr-xr-x 0 0 0 2-Dec-2009 13:34 BOOT
187 -r--r--r-- 0 0 383562 13-Jul-2009 05:39 BOOTMGR
188 -r--r--r-- 0 0 188 2-Dec-2009 14:26 DATA.INI
189 -r--r--r-- 0 0 1294 25-Nov-2009 21:04 EDITAF.BAT
190 dr-xr-xr-x 0 0 0 25-Nov-2009 21:04 IMAGES_BOOT
206 -r--r--r-- 0 0 1840 25-Nov-2009 21:04 PLANDATA.INI
207 dr-xr-xr-x 0 0 0 2-Dec-2009 13:34 PLANFOLDER
210 dr-xr-xr-x 0 0 0 2-Dec-2009 13:35 SOURCES
191 dr-xr-xr-x 0 0 0 19-Mar-2010 05:34 System Volume Information
214 dr-xr-xr-x 0 0 0 25-Nov-2009 21:04 ZZIMAGES

interface_write()
1 * HPFS - NTFS 0 32 33 191 89 26 3072000 [System]
2 P HPFS - NTFS 37752 107 52 38913 70 5 18649088 [HDDRECOVERY]
simulate write!

write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition
Top
Locked

Return to “Partition Recovery”